utils: add cert_to_ssh_key request
    
    With this new request p11_child is used to verify the certificate before
    the ssh key is extracted.
    
    Related to https://pagure.io/SSSD/sssd/issue/3489
    
    Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>